Open Source Vulnerabilities

spice

vulnerability was discovered in SPICE before 0

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

When trying to connect to a STUN server, a race condition could have caused a use-after-free of a pointer, leading to memory corruption and a potentially exploitable crash

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

libspiro

Libspiro through 20190731 has a stack-based buffer overflow in the spiro_to_bpath0() function in spiro

spice

spice versions though 0

webkit2gtk

"Clear History and Website Data" did not clear the history

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

When processing callbacks that occurred during window flushing in the parent process, the associated window may die; causing a use-after-free condition

keepalived

keepalived 2

spice

vulnerability was discovered in SPICE before version 0

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Manipulating individual parts of a URL object could have caused an out-of-bounds read, leaking process memory to malicious JavaScript

keepalived

keepalived 2

spice

Spice, versions 0

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

keepalived

keepalived 2

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier, resulting in memory corruption and a potentially exploitable crash

lftp

It has been discovered that lftp up to and including version 4

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

json-c, libfastjson

json-c through 0

spice

flaw was found in spice in versions before 0

libetpan

LibEtPan through 1

librewolf, librewolf, librewolf, librewolf, librewolf

VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster::AddOrUpdateSink, resulting in a use-after-free, memory corruption, and a potentially exploitable crash

keepalived

In Keepalived through 2

minidlna

ReadyMedia (aka MiniDLNA) before versions 1

webkit2gtk

logic issue was addressed with improved state management

spice

Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0

librewolf, librewolf, librewolf, librewolf, librewolf

When "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused and allowed a manifest to be served from a subdirectory

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

minidlna

DNS rebinding issue in ReadyMedia (formerly MiniDLNA) before 1

librewolf, librewolf, librewolf, librewolf, librewolf

Mozilla developers and community members reported memory safety bugs present in Firefox 78 and Firefox ESR 78

webkit2gtk

logic issue was addressed with improved state management

gtk-vnc

Multiple integer overflows in the (1) vnc_connection_server_message and (2) vnc_color_map_set functions in gtk-vnc before 0

librewolf, librewolf, librewolf, librewolf, librewolf

code for downloading files did not properly take care of special characters, which led to an attacker being able to cut off the file ending at an earlier position, leading to a different file type ...

jansson

issue was discovered in Jansson through 2

fig2dev

denial of service vulnerabiity exists in fig2dev through 3

webkit2gtk

memory corruption issue was addressed with improved state management

gtk-vnc

gtk-vnc before 0

zoneminder

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras

librewolf, librewolf, librewolf, librewolf, librewolf

Firefox could be made to load attacker-supplied DLL files from the installation directory

fig2dev

double-free vulnerability exists in fig2dev through 3

webkit2gtk

buffer overflow issue was addressed with improved memory handling

librewolf, librewolf, librewolf, librewolf, librewolf

JIT optimizations involving the Javascript arguments object could confuse later optimizations

zoneminder

ZoneMinder is a free, open source Closed-circuit television software application

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

librewolf, librewolf, librewolf, librewolf, librewolf

redirected HTTP request which is observed or modified through a web extension could bypass existing CORS checks, leading to potential disclosure of cross-origin information

openstack-ironic-2026.1

zoneminder

ZoneMinder is a free, open source Closed-circuit television software application

openstack-ironic-2026.1

openstack-ironic-2026.1

openstack-ironic-2026.1